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Top Stories 

• Snowfall in California December 30 prompted a portion of Ortega Highway to close 
indefinitely and the 15 Freeway to close for several hours while fire officials rescued about 
186 drivers that were trapped along Highway 138. - KABC 7 Los Angeles (See item 5 ) 

• Approximately 319 flights were delayed and 102 additional flights were cancelled at San 
Francisco International Airport December 30 due to windy conditions. - KPIX 5 San 
Francisco (See item 8) 

• A partial wall collapse at a Morton Salt storage facility in Chicago December 30 caused 
tons of salt to spill into the adjacent McGrath Acura dealership’s parking lot damaging 
several cars. - Chicago Sun-Times (See item 13 ) 

• Researchers found that 4G USB modems contain exploitable vulnerabilities which could 
allow attackers to gain full control of the machines to which the devices are connected to 
including smartphones, industrial control systems (ICS), and supervisory control and data 
acquisition (SC AD A) machines. - Threatpost (See item 29 ) 




Fast Jump Menu 



PRODUCTION INDUSTRIES 

• Energy 

• Chemical 

• Nuclear Reactors. Materials, and Waste 

• Critical Manufacturing 

• Defense Industrial Base 

• Dams 

SUSTENANCE and HEAI.TH 

• Food and Agriculture 

• Water and Wastewater Systems 

• Healthcare and Public Health 



SERVICE INDUSTRIES 

• Financial Seryices 

• Transportation Systems 

• Information Technology 

• Communications 

• Commercial Facilities 
FEDERAL and STATE 

• Goyernment Facilities 

• Emergency Seryices 



1 - 



Energy Sector 



1 . December 30, KPIX 5 San Francisco; San Francisco Bay City News - (California) 
Outages keep PG&E crews working into the night; more than 30,000 Bay Area 
homes still in the dark. Utility crews worked to restore service to 30,000 customers in 
the San Francisco Bay Area that remained without power due to high winds December 
30. At the height of the outage 170,000 customers lost service. 

Source: http://sanfrancisco.cbslocal.eom/2014/12/30/outages-keep-pge-crews-working- 
into-the-night-more-than-30000-bav-area-homes-still-in-the-dark/ 

2. December 30, WBIR 10 Knoxville - (Kentucky) TVA decides not to retire two units 
at Ky. coal-fired plant. The Tennessee Valley Authority announced its decision 
December 30 to install additional air pollution controls at Shawnee Fossil Plant in 
Kentucky instead of retiring two units as part of an agreement with the U.S. 
Environmental Protection Agency. The installations will reduce nitrogen oxide and 
sulfur dioxide emissions and must be completed by December 2017. 

Source: http://www.wbir.eom/storv/monev/companies/2014/12/30/tva-decides-not-to- 
retire-two-units-at-kv-coal-fired-plant/21047579/ 

For another story, see item 29 
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Chemical Industry Sector 

3. December 29, WAFB 9 Baton Rouge - (Louisiana) Three workers hospitalized after 
chlorine release chemical plant. A chlorine release from a product storage tank at the 
Olin Chlor Alkali chemical plant in St. Gabriel sent three workers to the hospital for 
evaluation after they were exposed to the chemical December 29. No off-site impact 
was reported but a vapor cloud was seen hanging over the plant. 

Source: http://www.wafb.com/storv/27723243/three-workers-hospitalized-after- 
chlorine-release-chemical-plant 

For another story, see item 29 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

See item 29 
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Financial Services Sector 

4. December 31, KSNV 3 Las Vegas - (Nevada; Illinois) Seven face federal indictment 
in telemarketing scheme. Six individuals from Las Vegas and 1 from Illinois were 
charged by a federal grand jury in Las Vegas December 30 for their involvement in a 
scheme where they allegedly organized and operated 4 telemarketing companies and 
offered to help small business owners obtain grants from public and private entities in 
exchange for fees from about 2007 to 2010. 

Source: http://www.mvnews3.com/content/news/storv/las-vegas-federal-grand-iurv- 
telemarketing-scheme/KKrMBsLApU-FMmdXE7I84A.cspx 

For another story, see item 27 
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Transportation Systems Sector 

5. December 31, KABC 7 Los Angeles - (California) Southern California snow: Nearly 
200 drivers rescued, Ortega Highway closed. Snowfall in southern California 
December 30 prompted Ortega Highway between Riverside and Orange counties to 
close until further notice and the 15 Freeway to close for several hours overnight before 
reopening December 31. San Bernardino County fire officials used snowcats to rescue 
about 186 drivers that were trapped along Highway 138 near Crestline. 

Source: http://abc7.com/weather/socal-snow-more-than-130-drivers-stuck-15-fwy- 
ortega-highwav-closed/456192/ 

6. December 31, Daily News ofNewburyport - (Massachusetts) Crash, fuel spill snarl 
traffic on 1-495. A 2- vehicle accident involving a semi-truck closed 2 northbound 
lanes of Interstate 495 in Merrimac for several hours December 30 while crews cleaned 
an estimated 150 gallon fuel spill from the semi-truck. The cause of the crash is under 
investigation. 

Source: http://www.newburvportnews.com/news/local news/crash-fuel-spill-snarl- 
traffic-on-i/article 4f8b3cab-cb4f-5ca9-93f2-4cb422b5d45b.html 

7. December 30, Softpedia - (International) MileagePlus accounts of United Airlines 
frequent flyers accessed by unauthorized party. United Airlines officials reported 
that certain MileagePlus members’ accounts were suspended as a precaution after 
hackers breached a third-party service to gain access to members’ log-in credentials 
and account information, including MileagePlus number, account balance and status. 
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and email address, beginning December 24. 

Source: http://news.softpedia.com/news/MileagePlus-Accounts-of-United-Airlines- 
Frequent-Flyers-Accessed-Bv-Unauthorized-Partv -468673. shtml 

8. December 30, KPIX 5 San Francisco - (California) Windy conditions cause 100s of 
flight cancellations, delays at SFO; travelers should call ahead. Approximately 319 
flights were delayed and 102 additional flights were cancelled at San Francisco 
International Airport in California December 30 due to windy conditions. 

Source: http://sanfrancisco.cbslocal.eom/2014/12/30/windv-conditions-cause-100s-of- 
flight-cancellations-delavs-at-sfo-travelers-call-ahead/ 

9. December 30, Sunbury Daily Item - (Pennsylvania; Georgia) 4 college students 
‘exploring’ at FAA tower, troopers say. Four men were charged for allegedly 
breaking into a Federal Aviation Administration air traffic navigation tower in Snyder 
County December 28 triggering an intruder alarm that shut down the Very High 
Frequency Omni Directional Range signal. Authorities reported that there was no 
damage to the building or equipment and there was no safety risk posed to any aircraft. 
Source: http://www.dailvitem.com/news/college-students-exploring-at-faa-tower- 
troopers-say/article c4b733e8-8fbf-l Ie4-b435-cbba8d3ec675.html 

10. December 30, Associated Press - (New York) Car-carrier truck crashes, leaving 
some of its cargo overturned on New York City highway. A stretch of the Long 
Island Expressway in the Queens area of New York City was closed for more than 2 
hours December 30 after a semi-truck jackknifed and some of the cars it was carrying 
fell onto the roadway. One person was injured in the accident. 

Source: 

http://www.therepublic.eom/view/storv/462204133b2b486f92476f280d750224/NY— 

Car-Carrier-Crash 



11. December 30, Attleboro Sun Chronicle - (Massachusetts) Tractor-trailer rollover 
spills scrap metal, ties up highway traffic in Attleboro area for hours. A semi-truck 
crashed and spilled its cargo of scrap metal onto Interstate 95 south near Attleboro 
December 29 closing lanes in both directions of the highway for approximately 7 
hours. The Massachusetts Department of Environmental Protection and a contractor 
responded to the scene to clean an estimated 60 to 70 gallons of fuel that spilled when 
the truck’s saddle tank ruptured. 

Source: http://www.thesunchronicle.com/news/local news/tractor-trailer-rollover- 
spills-scrap-metal-ties-up-highway-traffic/article df75978e-8f91-lle4-8328- 
9b349ba6729a.html 
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Food and Agriculture Sector 

12. December 31, U.S. Department of Agriculture - (National) Tennessee firm recalls 
chicken products due to misbranding and undeclared allergens. The Pood Safety 
and Inspection Service announced December 31 that Campos Poods, EEC issued a 
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recall for about 5,300 pounds of Rockin’ Roasted roasted chicken products following a 
recall for a third party supplier’s spice ingredient that was contaminated with peanut 
allergens. The affected products were sent to distribution centers nationwide. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/20 1 4/recall-093-20 14-release 



13. December 30, Chicago Sun-Times - (Illinois) Building collapse at Morton Salt on 
North Side. A partial wall collapse at a Morton Salt storage facility in Chicago 
December 30 caused tons of salt to spill into the adjacent McGrath Acura dealership’s 
parking lot damaging several cars. Authorities reported that the collapse was likely due 
to salt being stored too high and that inspectors were assessing the structural integrity 
of the building. 

Source: http://chicago.suntimes.eom/business/7/7 1/247701/building-collapse-reported- 
morton-salt-north-side 



14. December 31, Northland’s NewsCenter - (Minnesota) At least 30 people sick after 
norovirus outbreak at Tycoons. The Minnesota Department of Health is investigating 
a foodbome norovirus outbreak linked to Tycoons restaurant in Duluth after at least 30 
patrons were sickened after eating at the business December 5. 

Source: http://www.northlandsnewscenter.com/news/local/30-people-sick-after- 
norovirus-outbreak-at-Tvcoons-287156651.html 

15. December 30, U.S. Food and Drug Administration - (National) John B. Sanfilippo & 
Son, Inc. voluntarily recalls Fisher brand 8 oz. chopped walnuts and Fisher brand 
8 oz. pecan cookie pieces because of possible health risk. The U.S. Food and Drug 
Administration announced December 30 that John B. Sanfilippo & Son, Inc., 
voluntarily recalled 8-ounce packages of its chopped walnuts and pecan cookie pieces 
products due to possible Salmonella contamination. The recalled products were sold at 
stores in several States and via Web-based sales. 

Source: http://www.fda.gov/Safetv/Recalls/ucm428489.htm 

16. December 30, U.S. Food and Drug Administration - (California; Pennsylvania) 
Bleating Heart Cheese expanding voluntary recall to include all cheese produced 
between February 14, 2014 to September 19, 2014. The U.S. Food and Drug 
Administration reported December 30 that Bleating Heart Cheese expanded its 
December 17 recall to cover all of its sheep milk, goat milk, water buffalo milk, and 
cows milk cheese produced between February 14 and September 19 as a precaution due 
to possible Listeria monocytogenes contamination. The affected cheeses were shipped 
to distributors servicing retail food shops, restaurants and stores in California and 
Pennsylvania. 

Source: http://www.fda.gov/Safetv/Recalls/ucm428494.htm 

17. December 30, U.S. Food and Drug Administration - (National) TEN BC LLC issues 
allergy alert on undeclared peanuts in "Tommy’s Superfoods 10 oz. Santa Fe 
Rice". The U.S. Food and Drug Administration announced December 29 that Austin- 
based TEN BC LLC recalled 10-ounce packages of Tommy’s Superfoods Santa Le 
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Rice sold in the frozen foods section of retail stores nationwide due to undeclared 
peanuts. Production of the product was suspended until the labeling issue was 
corrected. 

Source: http://www.fda.gov/Safetv/Recalls/ucm428406.htm 

18. December 30, U.S. Department of Agriculture - (Texas) Texas firm recalls chicken 
and beef products due to misbranding and undeclared allergens. The Food Safety 
and Inspection Service reported December 30 that J & B Sausage Co., expanded a 
December 27 recall for chicken and beef products to include an additional 9,909 
pounds of Cajun Hollar Brand Inc. Creole Style Boudin following a recall for a third 
party supplier’s spice ingredient that was contaminated with peanut allergens. The 
recalled products were shipped to retailers across Texas. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/20 1 4/recall-09 1 -20 14-release-expansion 
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Water and Wastewater Systems Sector 

19. December 31, Thomasville Times-Enterprise - (Georgia) Heavy rain causes Moultrie 
sewer discharge into Ochlockonee River. At least 10,000 gallons of raw sewage from 
the City of Moultrie’s sewer system spilled into the Ochlockonee River following a 
December 23-24 rain storm that placed the entire lift station under water. 

Source: http://www.timesenterprise.com/news/local news/heavy-rain-causes-moultrie- 
sewer-discharge-into-ochlockonee-river/article 3f988492-90e0-l Ie4-a838- 
c35730ad55c2.html 

20. December 30, Ithaca Journal - (New York) Ithaca Fire Dept, contained S02 spill. 
HAZMAT crews responded to a chemical spill at the Ithaca Waste Water Treatment 
Facility in New York December 29 after the supply line on a 150 pound sulfur dioxide 
cylinder ruptured and its contents released while a worker was moving the cylinder. 
Technicians shut down all cylinders in the facility while they investigated and 
contained the release and the facility was cleared after about 3 hours. 

Source: http://www.ithacajoumal.eom/storv/news/public-safetv/2014/12/30/ithaca-fire- 
dept-contained- spill/2 1056771/ 

For another story, see item 29 
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Healthcare and Public Health Sector 

21. December 31, CNN - (National) CDC: Flu at epidemic level; 15 children dead this 
season. The U.S. Centers for Disease Control and Prevention announced December 30 
that the U.S. officially surpassed the epidemic threshold for the flu virus for the season 
after a total of 15 children died due to the virus which was declared widespread among 
36 States. 
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Source: http ://www .cnn . com/20 14/1 2/3 1 /health/flu- epidemic/index . html 



For another story, see item 29 
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Government Facilities Sector 

22. December 31, Suffolk News-Herald - (Virginia) Power outage closes courthouse. A 
power outage prompted the closure of the Mills E. Godwin Court Complex in Suffolk 
December 31. The complex is scheduled to reopen January 5. 

Source: http://www.suffolknewsherald.com/2014/12/31/power-outage-closes- 
courthouse/ 



For another story, see item 29 
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Emergency Services Sector 

23. December 31, Associated Press - (Pennsylvania) Man tries to run down police; they 
shoot, kill him. Police shot and killed a man who had posted a video on social media 
threatening to kill police and FBI agents after he attempted to use his car to run down 
officers seeking to arrest him December 30 in Upper Darby. Police ordered the man out 
of his vehicle and opened fire when the suspect appeared to be accelerating in their 
direction. 

Source: http://www.msn.com/en-us/news/crime/man-tries-to-run-down-police-thev- 
shoot-kill-him/ar-BBhmObQ 

24. December 30, KHOU 11 Houston - (Texas) Woman who escaped custody 
apprehended. Police recaptured a woman nearly 12 hours after she escaped from the 
Harris County Sheriffs Office in Houston December 30 where she was being held in 
custody. The detainee allegedly walked out of the Harris County Jail’s Inmate 
Processing Center with other inmates who were being released. 

Source: http://www.khou.eom/storv/news/crime/2014/12/30/woman-escapes-custodv- 
from-harris-county-jail/2 1067057/ 



[ Return to top ] 

Information Technology Sector 

25. December 31, Softpedia - (International) Number of botnet control servers increased 
in 2014 - report. Spamhaus released a report December 3 1 claiming that the number 
of IP addresses that have served at some point during 2014 as command and control 
(C&C) servers increased 7.88 percent to 7,182 addresses compared to 525 in 2013. The 
report also found that the Zeus banking trojan was the most common type of malware 
followed by Citadel. 
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Source: http://news.softpedia.com/news/Number-of-Botnet-Control-Servers-Increased- 
in-20 1 4-Report-46872 1 . shtml 



26. December 30, Securityweek - (International) Android malware increasingly 
packaged with HTML5 apps: Trend Micro. Trend Micro reported that hackers 
repackaged legitimate HTML5 applications into Android malware at an increase of 200 
percent in 2014 compared to 2013, while the number of potentially unwanted 
applications (PUAs) and pieces of malware also increased, with nearly half of such 
Android threats being disguised as games. 

Source: http://www.securitvweek.com/android-malware-increasingly-packaged-html5- 
apps-trend-micro 

27. December 30, Softpedia - (International) Fake Apple store purchase notification 
lures to phishing page. A researcher with Hoax-Slayer found a malicious email 
campaign that delivers messages claiming to be from Apple and informs the user that 
TomTom navigation has been purchased from their store, and provides a link to cancel 
the purchase which leads to a phishing page in an attempt to steal banking information. 
Source: http://news.softpedia.com/news/Fake-Apple-Store-Purchase-Notification- 
Lures-to-Phishing-Page-468678. shtml 

28. December 30, Threatpost - (International) XXE bug patched in Facehook careers 
third-party service. Facebook rewarded a researcher who discovered a blind XXE 
(XML External Entity) Out of Band bug in its third-party service that handles resumes 
on Eacebook’s careers page. The vulnerability was patched after the researcher found 
that he was able to upload a .docx file with some additional code that was not vetted by 
the third-party service, which could allow an attacker to carry out a number of 
malicious activities. 

Source: http://threatpost.com/xxe-bug-patched-in-facebook-careers-third-party- 
service/1 10151 



29. December 30, Threatpost - (International) Majority of 4G USB modems, SIM cards 
exploitable. Positive Technologies’ researchers found that 4G USB modems contain 
exploitable vulnerabilities which could allow attackers to gain full control of the 
machines to which the devices are connected to, including SIM cards via SMS over 4G 
networks. The vulnerabilities could also allow access to subscriber accounts on relevant 
carrier portals, and the impact of attack methods include smartphones, industrial control 
systems (ICS), and supervisory control and data acquisition (SC AD A) machines. 
Source: http://threatpost.com/maioritv-of-4g-usb-modems-sim-cards- 
exploitable/ 110139 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

30. December 30, Portland Oregonian - (Oregon) Electrical fire causes $100,000 in 
damages to downtown Portland condo tower. A 2-alarm fire that broke out in an 
electrical vault at the Harrison West condominium building in downtown Portland 
December 30 caused an estimated $100,000 in damages. Power was cut off to at least 3 
floors of the structure while crews worked to make repairs. 

Source: 

http://www.oregonlive.com/portland/index.ssf/2014/12/electrical fire causes 100000 
in damages to downtown portland condo tower.html 

3 1 . December 30, Big Island Now - (Hawaii) Clothing fire forces evacuation of Hilo 
Walmart. A suspicious fire in a clothing section of a Walmart store in Hilo December 
30 prompted the store to evacuate and close indefinitely while authorities investigate 
the incident. 

Source: http://bigislandnow.eom/2014/12/30/clothing-fire-forces-evacuation-of-hilo- 
walmart/ 

32. December 30, TAPinto.com - (New Jersey) 3-alarm apartment fire displaces more 
than 20 occupants. A 3-alarm fire at a 17-unit apartment building in Edison, New 
Jersey, December 30 displaced 20 residents. The cause of the fire is under 
investigation. 

Source: http://tapinto.net/articles/3-alarm-apartment-fire-displaces-more-than-20-occ 

33. December 29, Associated Press - (Ohio) Fire causes $300,000 damage to Cleveland 
hotel. A kitchen fire at the Wyndham Hotel in downtown Cleveland December 29 
caused an estimated $300,000 in damage and prompted a temporary evacuation of 
about 12 guests. Firefighters extinguished the blaze that entered into the hotel’s 
ductwork. 

Source: http://www .indeonline. com/article/20 141 229/News/ 141 2294 1 5 
For additional stories, see items 13 , 14, and 34 
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Dams Sector 



34. December 30, Fayetteville Observer - (North Carolina) Woodlake Resort and 

Country Club ordered to lower lake because of unsafe dam. State officials ordered 
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the Woodlake Resort and Country Club in Vass to lower its 1,200-acre lake by 3 feet to 
relieve some of the stress placed on a “high hazard” dam that could possibly threaten 
human life or property if it failed. A dam safety order issued by the North Carolina 
Department of Environment and Natural Resources requires Woodlake to submit a plan 
by March 16, 2015 outlining how to fix or breach the dam that has several cracks and a 
void of unknown size at the bottom of its main spillway. 

Source: http://www.favobserver.com/news/local/woodlake-resort-and-country-club- 
ordered-to-lower-lake-because/article dc4ed 1 5 d-663 8-5bd5 -b3 89- 1 7 dfb47 ccda3 .html 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://w'W'vv'. dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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